Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft
File:                     Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft (raw, json)
Hash identifier:          QPntEdVh1SVafSzanaSC6D3WtVmQzDQwPe+q8uFQsfs=
Subject key identifier:   10:10:AC:E5:B2:64:F6:9E:24:F5:8A:B0:AE:52:A6:F6:A5:1B:2A:D9
Authority key identifier: 27:2D:71:AD:62:64:57:75:CC:DF:BB:57:70:47:8E:59:43:EA:65:95
Certificate issuer:       /CN=A91D6DBD/serialNumber=272D71AD62645775CCDFBB5770478E5943EA6595
Certificate serial:       0159
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jy1xrWJkV3XM37tXcEeOWUPqZZU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft
Manifest number:          0150
Signing time:             Tue 05 Aug 2025 04:42:46 +0000
Manifest this update:     Tue 05 Aug 2025 04:42:45 +0000
Manifest next update:     Tue 12 Aug 2025 04:42:45 +0000
Files and hashes:         1: Jy1xrWJkV3XM37tXcEeOWUPqZZU.crl (hash: izHK99QW6wFUX5LAbyNJQxLK9ISgMRCJf/qbHSUM6Yw=)
                          2: 2ADA37E6790F11EE99D7CB43C4F9AE02.roa (hash: qZFxZlK/s9XuD9ZwE9EGQRrcfUALnpisB8t9uJ9BMCk=)
                          3: 72F76026790A11EE88F94A29C4F9AE02.roa (hash: YumOlFepqCcL4/FMk4aKjlchGI7ETUe9t0yQ6qtDs+I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.crl
                          rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jy1xrWJkV3XM37tXcEeOWUPqZZU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 Aug 2025 04:42:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 345 (0x159)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6DBD, serialNumber=272D71AD62645775CCDFBB5770478E5943EA6595
        Validity
            Not Before: Aug  5 04:42:45 2025 GMT
            Not After : Aug 12 04:42:45 2025 GMT
        Subject: CN=68918bc5-7bee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3c:8c:30:74:97:dd:85:01:40:25:38:c9:95:
                    b7:d8:d5:d0:0b:3c:a3:a2:f8:da:3b:11:e3:01:5b:
                    e1:56:2e:f2:3d:88:8a:f4:a5:77:a2:11:05:69:35:
                    d3:8c:00:62:13:25:d1:24:e1:8a:fe:3e:69:f5:23:
                    9e:27:d9:e3:13:2c:1c:d5:f7:85:9f:48:19:73:bd:
                    22:39:db:f9:b3:bc:6c:80:8d:23:7f:83:af:dd:a7:
                    f7:cb:29:36:de:0a:5b:c3:61:09:f3:74:3c:7f:55:
                    ea:a4:0e:07:b1:bb:48:d7:46:13:db:93:85:eb:e3:
                    d9:48:de:a0:84:9b:4f:aa:27:cc:8f:2e:2d:87:9c:
                    9d:9b:2b:af:52:05:b2:a3:82:45:ac:98:83:48:77:
                    5d:8f:13:59:2a:3b:58:21:6f:58:25:d2:1b:50:e8:
                    11:d9:43:60:4d:5f:2a:6f:71:37:c4:9c:f0:fd:86:
                    96:a5:29:d8:b1:a6:47:33:26:22:29:54:d4:4c:23:
                    11:ae:58:7f:7f:63:13:7b:01:39:c2:a4:37:fb:3b:
                    d4:26:14:75:fd:a7:d1:4d:af:1e:d0:8e:a2:99:bc:
                    54:1f:a4:ff:dc:79:d8:b8:3b:2f:ba:bc:e6:ee:5d:
                    84:6f:81:f1:5a:a1:a0:e6:97:b6:75:12:cd:8d:c0:
                    af:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:10:AC:E5:B2:64:F6:9E:24:F5:8A:B0:AE:52:A6:F6:A5:1B:2A:D9
            X509v3 Authority Key Identifier:
                keyid:27:2D:71:AD:62:64:57:75:CC:DF:BB:57:70:47:8E:59:43:EA:65:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jy1xrWJkV3XM37tXcEeOWUPqZZU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:4a:28:7a:a1:5b:61:7a:a2:60:5c:df:ed:4c:26:57:0a:5d:
         20:d7:61:7b:b4:5e:f4:cd:c2:5f:74:0f:a9:81:7f:da:ea:f3:
         58:b1:e5:3f:d8:04:67:fd:0d:0c:13:79:da:22:fa:c0:70:9b:
         10:42:b0:d9:6f:66:eb:9c:d2:e8:72:d2:40:9d:75:f6:f5:69:
         02:97:c6:8e:a7:8a:40:9c:8e:90:19:06:98:3b:02:7d:e3:7a:
         46:fd:d6:ca:17:e7:c2:80:3e:6e:a5:e1:ab:90:fb:a1:3f:2e:
         e0:ab:90:5e:aa:a7:1f:cc:c1:59:6d:67:ce:e8:a0:40:ed:2c:
         87:16:7b:87:40:58:f8:b8:de:84:f4:3e:8b:ec:ee:93:6f:34:
         4a:52:d5:9f:2a:bf:fc:28:71:be:c1:f3:1f:12:de:a3:60:29:
         f5:55:31:8d:22:89:f6:8e:b3:e6:ba:2d:90:3d:00:4d:2f:42:
         55:c3:44:41:96:b5:2b:d8:14:e1:1f:6c:c6:89:79:6a:72:84:
         85:fb:37:c6:b9:19:80:00:85:36:70:be:e6:64:3f:69:30:7d:
         3c:15:20:06:db:10:d3:04:ab:97:72:f9:1c:b0:85:bd:64:b3:
         dc:da:2e:a5:f5:1e:b5:ac:ba:3e:08:74:07:e1:2f:f8:9a:26:
         9c:00:1f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:29:37 2025 by rpki-client